Key Takeaways
- • MiCAR transitional period expired on 1 July 2026: The 18-month grace period allowing crypto-asset service providers (CASPs) to operate under legacy national frameworks without MiCAR authorization ended, making any unlicensed provision of MiCAR-regulated crypto services illegal across the EU as of this date.
- • Luxembourg VASPs face immediate compliance deadline: Virtual asset service providers registered under Luxembourg's 12 November 2004 AML Law were the primary beneficiaries of the transitional regime and must now hold valid MiCAR CASP authorisation or cease operations immediately.
- • No grandfathering exemption remains in effect: The expiration eliminates the regulatory exemption that previously allowed existing market participants to continue operations during the transition; entities without valid MiCAR authorisation are now operating outside the law.
- • Article 60(5) assessment obligations intensify: Investment fund managers in Luxembourg must now formally assess their crypto-asset activities against MiCAR Article 60(5) requirements, a compliance obligation that gained prominence as the transitional period concluded.
- • Regulatory enforcement begins immediately: EU member state financial regulators, including the Commission de Surveillance du Secteur Financier (CSSF) in Luxembourg, have shifted focus to enforcement, with CASPs awaiting authorisation facing operational uncertainty and potential service suspensions.
Summary
The Markets in Crypto-Assets Regulation (MiCAR) transitioned from a regulatory framework with grandfathering provisions to full enforcement on 1 July 2026, marking a critical inflection point for crypto-asset service providers across Europe and specifically in Luxembourg. The 18-month transitional period established under MiCAR Article 143(3) has now expired, eliminating the legal exemption that allowed entities already providing crypto-asset services under applicable national law to continue operations without holding a formal MiCAR CASP authorisation.
In Luxembourg, the primary market participants affected by this deadline are virtual asset service providers (VASPs) registered under the Law of 12 November 2004 on the fight against money laundering and terrorist financing, as amended. These entities, which operated in a compliant state under Luxembourg's legacy AML framework, were granted the maximum 18-month transitional window permitted by MiCAR to transition to the new unified regulatory regime. As of 1 July 2026, any VASP or other CASP operating in Luxembourg without a valid MiCAR authorisation is now operating illegally and exposed to regulatory enforcement action.
The expiration of the transitional period has raised specific compliance obligations for investment fund managers (IFMs) operating in Luxembourg. These managers must now formally assess their crypto-asset-related activities against Article 60(5) of MiCAR, a provision that governs permissible crypto-asset exposure for investment funds. This assessment requirement, highlighted in updated guidance from the CSSF in March 2026, represents a shift from transitional flexibility to permanent compliance obligations, particularly for funds holding or trading crypto assets.
For institutional investors and alternative investment professionals with exposure to European crypto infrastructure, the elimination of the grandfathering exemption creates immediate operational risk for service providers still awaiting formal MiCAR authorisation. Several CASPs across the EU remain in the authorization pipeline, creating potential service disruptions for institutional clients dependent on these providers. The shift from transition to enforcement means that regulatory bodies including the CSSF are now positioned to pursue violations with full legal authority, making compliance status a material operational and counterparty risk factor for market participants.
In Luxembourg, the primary market participants affected by this deadline are virtual asset service providers (VASPs) registered under the Law of 12 November 2004 on the fight against money laundering and terrorist financing, as amended. These entities, which operated in a compliant state under Luxembourg's legacy AML framework, were granted the maximum 18-month transitional window permitted by MiCAR to transition to the new unified regulatory regime. As of 1 July 2026, any VASP or other CASP operating in Luxembourg without a valid MiCAR authorisation is now operating illegally and exposed to regulatory enforcement action.
The expiration of the transitional period has raised specific compliance obligations for investment fund managers (IFMs) operating in Luxembourg. These managers must now formally assess their crypto-asset-related activities against Article 60(5) of MiCAR, a provision that governs permissible crypto-asset exposure for investment funds. This assessment requirement, highlighted in updated guidance from the CSSF in March 2026, represents a shift from transitional flexibility to permanent compliance obligations, particularly for funds holding or trading crypto assets.
For institutional investors and alternative investment professionals with exposure to European crypto infrastructure, the elimination of the grandfathering exemption creates immediate operational risk for service providers still awaiting formal MiCAR authorisation. Several CASPs across the EU remain in the authorization pipeline, creating potential service disruptions for institutional clients dependent on these providers. The shift from transition to enforcement means that regulatory bodies including the CSSF are now positioned to pursue violations with full legal authority, making compliance status a material operational and counterparty risk factor for market participants.
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.